#security

Validate environment variable usage in codebase

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

OXO is a security scanning orchestrator for the modern age.

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

Official command-line tool for managing SpiceDB

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

Suite of tools for Monitoring OP Stack Chains 🔴 Offers real-time detection and Incident response capabilities ✨

Basic rate-limiting middleware for the Express web server

A simple TLS proxy with mutual authentication for securing non-TLS services.

Zerocopy makes zero-cost memory manipulation effortless. We write `unsafe` so you don’t have to.

in-toto Attestation Framework

Kubescape eBPF agent 🥷🏻

Ziti SDK for Golang

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.

Upgradeable variant of OpenZeppelin Contracts, meant for use in upgradeable contracts.

A collection of additional crates supporting the actix and actix-web frameworks.